From d895231295db0254d2b8f2c71faaf032f8aa5455 Mon Sep 17 00:00:00 2001
From: "fabio.d.mota" <fabio.d.mota@cgi.com>
Date: Mon, 30 Oct 2023 11:45:17 +0000
Subject: [PATCH] fix(Backend): add Docker Notice md

---
 CHANGELOG.md     |  6 +++++-
 DOCKER_NOTICE.md | 28 ++++++++++++++++++++++++++++
 README.md        | 18 ++++++++++++++++++
 3 files changed, 51 insertions(+), 1 deletion(-)
 create mode 100644 DOCKER_NOTICE.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 639bb8b2..69b39ebc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,7 +8,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 # Changelog
 
-
 ## [1.2.1] - tbr
 
 ### Changed
@@ -19,6 +18,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Fix health check for trivy scan on docker image
 - Fix vulnerability find on spring security core 6.1.1
 
+### Added
+- Added docker registry workflow
+- Added dockerhub notice.md
+- Added docker notice.md to readme.md
+
 ## [1.2.0] - 2023-10-10
 
 ### Added
diff --git a/DOCKER_NOTICE.md b/DOCKER_NOTICE.md
new file mode 100644
index 00000000..ea7723e2
--- /dev/null
+++ b/DOCKER_NOTICE.md
@@ -0,0 +1,28 @@
+## Notice for Docker image
+
+DockerHub: [https://hub.docker.com/u/tractusx](https://hub.docker.com/r/tractusx)
+
+Eclipse Tractus-X product(s) installed within the image:
+
+**VAS Country Risk Backend**
+
+Eclipse Tractus-X product(s) installed within the image:
+
+- GitHub: https://github.com/eclipse-tractusx/vas-country-risk-backend 
+- Project home: https://projects.eclipse.org/projects/automotive.tractusx
+- Pool Dockerfile: https://github.com/eclipse-tractusx/vas-country-risk-backend/blob/main/Dockerfile
+- Project license: [Apache License, Version 2.0](https://github.com/eclipse-tractusx/vas-country-risk-backend/blob/main/LICENSE)
+
+
+**Used base image**
+
+- [eclipse-temurin:17-jre-alpine](https://github.com/adoptium/containers)
+- Official Eclipse Temurin DockerHub page: https://hub.docker.com/_/eclipse-temurin
+- Eclipse Temurin Project: https://projects.eclipse.org/projects/adoptium.temurin
+- Additional information about the Eclipse Temurin images: https://github.com/docker-library/repo-info/tree/master/repos/eclipse-temurin
+
+
+As with all Docker images, these likely also contain other software which may be under other licenses
+(such as Bash, etc. from the base distribution, along with any direct or indirect dependencies of the primary software being contained).
+
+As for any pre-built image usage, it is the image user's responsibility to ensure that any use of this image complies with any relevant licenses for all software contained within.
\ No newline at end of file
diff --git a/README.md b/README.md
index d3714a2c..c0d79e8a 100644
--- a/README.md
+++ b/README.md
@@ -129,3 +129,21 @@ and follows the mainly used project structure in most Spring Boot projects.
 ## API sample endpoints
 
 * Swagger UI: `http://localhost:8080/swagger-ui/index.html#/`
+
+
+## Notice for Docker image
+
+This application provides container images for demonstration purposes.
+
+DockerHub: https://hub.docker.com/u/tractusx/vas-country-risk-backend
+
+Base image: eclipse-temurin:17-jre-alpine
+
+- Dockerfile: [nginxinc/nginx-unprivileged:alpine](https://github.com/nginxinc/docker-nginx-unprivileged/blob/main/Dockerfile-alpine.template)
+- GitHub project: [https://github.com/nginxinc/docker-nginx-unprivileged](https://github.com/nginxinc/docker-nginx-unprivileged)
+- DockerHub: [https://hub.docker.com/r/nginxinc/nginx-unprivileged](https://hub.docker.com/r/nginxinc/nginx-unprivileged)
+
+## License
+
+Distributed under the Apache 2.0 License.
+See [LICENSE](./LICENSE) for more information.